Privacy Policy
Last updated: August 18, 2026
This policy describes what ShipShelf collects and how it is used. Short version: we collect what the product needs to function, and nothing is sold to third parties.
Who is responsible for your data
The data controller is SIA 2A2M, a limited liability company (SIA) registered in the Republic of Latvia, operating ShipShelf. For any privacy request or question, contact support@shipshelf.dev.
What we collect
Account data (name, email, password hash), the content you publish (listings, reviews, upvotes), newsletter email addresses, and basic usage counters such as listing view counts. Passwords are stored only as bcrypt hashes.
How it is used
To operate the catalog: showing your listings and reviews publicly under your profile, ranking products, sending the newsletter you subscribed to, and preventing abuse such as vote manipulation.
Legal basis & retention
We process account and content data to perform our contract with you (running the catalog you signed up for), and abuse-prevention data — such as keyed hashes of IP addresses — under our legitimate interest in keeping rankings honest. Analytics events and notifications are automatically deleted after 90 days; account data is kept until you ask us to delete it.
Your rights
Under the GDPR you can request access to, correction of, or deletion of your personal data, download a portable copy yourself from the dashboard ("Download my data"), or object to processing based on legitimate interest. For anything else, write to support@shipshelf.dev and we will action it promptly. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local supervisory authority.
Your controls
You can edit or delete your products at any time from the dashboard, and delete your entire account — with everything attached to it — self-serve from the dashboard's Danger zone (comments that others replied to remain as anonymous "Deleted user" placeholders). To unsubscribe from the newsletter, contact us and we will action it promptly.
Cookies
A single httpOnly session cookie keeps you logged in. No third-party advertising or tracking cookies are set.